Privacy and Cookie Policy

Effective date: 01/08/2025
Last updated: 07/09/2025

Forward Focus Consulting (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, and protect personal data when you use our website, including the chatbot service, and how we use cookies.

We comply with the UK GDPR, the EU GDPR (where applicable), and other relevant data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Forward Focus Consulting
Blake House

66 Bootham

York

YO30 7BZ

Email: neville.abbott@forwardfocus.ai

2. Information We Collect

Website Usage Data: anonymised IP address, browser type, device information, access times.
Chatbot Interaction Data: anonymised conversation logs (no personal identifiers unless you provide them voluntarily). We use a random browser ID to understand repeat usage. This ID isn’t linked to personal details.
Contact Data: name, email, phone number (if provided through forms or communication).
Cookies & Tracking Data: described in Section 8.

3. How We Use Your Data

We use data to:

Operate and improve the website and chatbot.
Analyse anonymised chatbot interactions to improve performance (retained 6 months).
Communicate with you when you contact us.
Comply with legal obligations.

4. Legal Basis for Processing

Consent: e.g. accepting cookies, newsletter sign-up.
Contract: providing services you request.
Legitimate Interests: anonymised chatbot logging and analytics.
Legal Obligation: when law requires retention or disclosure.

5. Data Retention

Chatbot logs: retained for 6 months, then deleted or aggregated.
Contact data: kept as long as needed to respond to enquiries, then deleted unless ongoing communication is agreed.
Cookies: see Section 8 for storage duration.

6. Sharing of Data

We do not sell personal data. We may share with:

Service providers/hosting partners under strict agreements.
Authorities if required by law.

If data is transferred outside the UK/EU, we use appropriate safeguards as described in Section 7.

7. International Data Transfers

We use third-party service providers (including OpenAI, based in the United States) to provide chatbot functionality. Where data is transferred outside the UK/EU, it is protected under recognised safeguards, including the EU–US Data Privacy Framework and the UK–US Data Bridge, which permit transfers to certified US providers.

Our chatbot is intended for general enquiries, and we ask that you do not submit sensitive or personally identifiable information through it.

8. Your Rights

You can:

Request access, correction, or deletion of your data.
Restrict or object to processing.
Withdraw consent at any time.
Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

9. Cookies and Tracking

We use cookies and similar technologies:

Strictly Necessary Cookies: essential for basic website functions.
Performance/Analytics Cookies: help us understand site and chatbot use (e.g. anonymised analytics).
Functionality Cookies: remember preferences and improve your experience.

Managing Cookies:
You can control or disable cookies via your browser settings. Please note that some website features may not function properly without them.

Cookie Lifespan:

Session cookies expire when you close your browser.
Persistent cookies last between 1 day and 12 months depending on their purpose.

10. Data Security

We apply technical and organisational measures to safeguard your data from unauthorised access, loss, or misuse.

11. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect data from them.

12. Changes to This Policy

We may update this Policy periodically. Changes will be posted here with a new “last updated” date.

13. Contact Us

For questions about this Policy or to exercise your rights: